Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/CZ-Vszt03uJCktqaclNv8Beh6so.roa
File: CZ-Vszt03uJCktqaclNv8Beh6so.roa (raw, json)
Hash identifier: tvVrqDYNwrBwjnQ5IaKMo4kF7P29ItyvpMoYlOZH5vw=
Subject key identifier: 09:9F:95:B3:3B:74:DE:E2:42:92:DA:9A:72:53:6F:F0:17:A1:EA:CA
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 0191451DC5F5E8B8B13536A1994C0ACD8FDE
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/CZ-Vszt03uJCktqaclNv8Beh6so.roa
Signing time: Mon 12 Aug 2024 05:44:24 +0000
ROA not before: Mon 12 Aug 2024 05:44:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42343
IP address blocks: 91.150.0.0/18 maxlen: 18
93.91.188.0/22 maxlen: 22
185.141.96.0/22 maxlen: 22
2a04:b080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:1d:c5:f5:e8:b8:b1:35:36:a1:99:4c:0a:cd:8f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Aug 12 05:44:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=099f95b33b74dee24292da9a72536ff017a1eaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:d5:5b:7d:e5:30:2e:24:23:76:a9:d9:e4:
d1:2b:1e:78:98:ba:13:51:62:65:e4:17:11:0e:f0:
86:6e:2d:15:86:3a:8d:c6:d1:36:9c:1f:17:2d:f5:
db:63:5e:97:b6:81:a6:ed:d5:89:e6:b7:e5:d9:3e:
2f:c2:99:1b:a0:cb:b8:8b:83:3c:2b:48:68:54:90:
91:b9:6b:69:a8:6e:7b:0b:82:a7:e8:22:91:29:57:
9c:97:c5:c0:88:58:9d:28:82:da:41:36:c6:64:f8:
f6:2c:d6:5b:2d:c8:7c:f4:91:dd:41:de:f4:36:ba:
07:fe:42:bd:2e:a0:62:11:55:fe:e4:76:ea:21:06:
2d:54:9a:04:ac:4e:b4:d9:c7:25:15:ca:d0:54:a2:
73:26:81:61:c6:86:f0:e8:8b:b1:d4:58:2c:d5:13:
f4:8c:3d:54:45:70:5e:c6:b6:50:07:87:9d:35:62:
bc:fd:50:ab:1f:08:2f:e8:7c:06:d3:37:1a:c5:2d:
be:da:58:6a:33:17:10:91:aa:6d:7e:92:26:07:1d:
b9:ca:5e:fd:de:aa:bb:a4:cb:7e:df:fa:d6:bf:c5:
e1:5d:9c:74:0f:a1:15:72:17:66:41:e7:a2:67:0a:
56:03:c2:19:18:f3:6a:0a:a7:ad:12:06:1d:97:88:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:95:B3:3B:74:DE:E2:42:92:DA:9A:72:53:6F:F0:17:A1:EA:CA
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/CZ-Vszt03uJCktqaclNv8Beh6so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.0.0/18
93.91.188.0/22
185.141.96.0/22
IPv6:
2a04:b080::/29
Signature Algorithm: sha256WithRSAEncryption
ac:da:dd:13:e9:8c:8a:6d:65:fe:c0:3e:ff:1a:17:b6:e3:5a:
13:08:f0:c9:1f:b7:16:6b:2a:37:84:43:33:e7:84:b8:e7:45:
88:f4:96:51:00:f4:e7:be:84:89:66:6c:80:55:eb:e4:56:e8:
7f:a5:59:26:5d:29:1c:0e:ba:20:97:2b:ba:d1:59:8c:83:b6:
66:cc:71:1b:4a:b8:73:16:54:e9:e8:10:7d:2d:05:67:76:0b:
24:82:6b:0f:06:74:2d:e3:a0:e9:94:29:2f:e1:aa:69:7a:21:
ea:f6:02:ce:83:67:30:7e:55:bd:b9:72:8c:93:55:67:98:3a:
77:80:22:83:15:f9:ee:f0:cc:e3:32:5d:b2:f8:5e:4c:7e:49:
10:6b:27:d1:6a:44:df:e5:e0:43:d7:f3:6c:40:28:21:df:2c:
6f:1b:94:33:b6:32:30:74:89:bb:03:8e:56:46:4a:61:d3:36:
56:13:1f:47:6a:29:a8:14:0e:13:84:62:8c:75:9a:77:b4:f8:
a6:79:86:18:6b:45:50:14:44:3e:76:63:c6:d5:80:8b:8f:93:
39:44:8d:3e:06:17:52:f8:07:0d:4b:89:4f:36:6e:8d:81:21:
26:f8:91:d1:d0:eb:c7:2a:88:14:8d:49:2a:35:71:5a:09:ba:
17:ca:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:38 2024 by rpki-client on console-ams.rpki-client.org